Hi Chris - there is some overlap between the events in the audit log and the event feed, but generally speaking the event feeds will show things that happened within a workspace, and the audit log will show things that happened at the account level such as access changes.
There’s no way to export audit logs via the UI, but you can hit the API endpoint you mentioned in point 3 to get what you need.